802.1x auth with ISE slow logging in to windows

[0rsnaric]

We are testing 802.1x authentication using ISE.  Right now when a computer reboots it takes a minute or more to complete login.  Based on wireshark and ISE logs it looks like the process is trying to do computer authentication first, failing, and then moving on to user authentication.  When set the client side to not use computer auth it still takes longer than normal to login to domain.

Is it normal for ISE based 802.1x authentication to slow down the login process so much?  We're talking 5-10x normal here.

Thanks.

[agrissimanis]

One potential issue with not using Computer auth (or Computer auth failing) is that the services that need network access at boot will be disrupted, will potentially retry, and fail again, and eventually result in time-out. This could be the cause of the delay. Try fixing Computer auth and see if that reduces the boot time.